II. AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) A system for addressing denial of service attacks directed at a web 
resource, comprising: 

a system for detecting improper requests; and 

a system for responding to improper requests that issues an HTTP "OK" response code 
when an improper request is detected , wherein a request is deemed improper if a message body 
associated with the request has a zero length . 

2. (Original) The system of claim 1, wherein the system for responding stops issuing HTTP 
"OK" response codes and issues no response after a predetermined number of improper requests 
are detected. 

3. (Original) The system of claim 1, wherein a request is deemed improper if the request is 
received from an unexpected host. 

4. (Canceled) 

5. (Original) The system of claim 1, wherein a request is deemed improper if an HTTP "post" or 
an HTTP "get" command is expected and neither an HTTP "post" nor an HTTP "get" command 
is received. 
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6. (Original) The system of claim 1, wherein a request is deemed improper if the request 
includes a HTTP "post" or "get" command with unknown arguments. 

7. (Original) The system of claim 1, wherein the HTTP "OK" response code comprises an HTTP 
204 "OK" message code. 

8. (Original) The system of claim 1, wherein the system for responding to improper requests 
includes a response protocol that utilizes a standard error handling procedure for a first improper 
request from a requesting resource, issues an HTTP OK response code for N subsequent 
improper requests from the requesting resource, and then stops responding to the requesting 
resource altogether. 

9. (Original) The system of claim 1, wherein the web resource comprises a server. 

10. (Currently Amended) A method for addressing denial of service attacks directed at a web 
resource, comprising: 

receiving messages at the web resource; 

analyzing each message and determining if the message is imprope r, wherein a message 
is deemed improper if the message is neither an HTTP "post" nor an HTTP "get" command 
when one of these commands is expected, or the message includes a HTTP "post" or "get" 
command with unknown arguments ; 

storing the source address of a message if the message is improper; 
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responding to a first improper message from an identified source address with an HTTP 
error response; 

responding to a set of subsequent improper messages from the identified source address 
with HTTP "OK" response codes; and 

stopping responses to the identified source address for all received improper messages 
after the set of subsequent improper messages have been responded to. 

1 1 . (Original) The method of claim 10, wherein a message is deemed improper if the message is 
received from an unexpected host. 

12. (Previously Presented) The method of claim 1 0, wherein a message is deemed improper if a 
message body associated with the message has a zero length. 

13-14. (Canceled) 

15. (Original) The method of claim 10, wherein the HTTP "OK" response code comprises an 
HTTP 204 "OK" message code. 

16. (Original) The method of claim 10, wherein the HTTP "OK" response comprises an HTTP 
200 "OK" message code. 
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17. (Currently Amended) A program product stored on a recordable medium for addressing 
denial of service attacks directed at a web resource, comprising: 

means for receiving messages at the web resource; 

means for analyzing each message and determining if the message is improper; 

means for storing the source address of a message if the message is improper; 

means for responding to a first improper message from an identified source address with 
an HTTP error response; and 

means for responding to a first predetermined number of subsequent improper messages 
from the identified source address with HTTP "OK" response codes ; and 

means for stopping responses to the identified source address after a second 
predetermined number of subsequent improper messages have been received . 

18. (Canceled) 

19. (Original) The program product of claim 17, wherein a message is deemed improper if the 
message is received from an unexpected host; if the message has a zero length; if the message is 
neither an expected HTTP "post" nor an expected HTTP "get" command; or if the message 
includes a HTTP "post" or "get" command with unknown arguments. 

20. (Original) The program product of claim 17, wherein the HTTP "OK" response codes 
comprise HTTP 204 "OK" response codes. 
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21 . (Original) The program product of claim 17, wherein messages that are deemed proper are 
passed to the web resource for further processing. 

22. (Original) The program product of claim 17, wherein the web resource is a web server. 
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